Overview

overview

9

Static

static

7

4504480bde...92.apk

android-9-x86

9

libwbsafeedit

debian-9-armhf

1

libwbsafeedit_64

ubuntu-18.04-amd64

libwbsafeedit_64

debian-9-armhf

libwbsafeedit_64

debian-9-mips

libwbsafeedit_64

debian-9-mipsel

libwbsafeedit_x86

ubuntu-18.04-amd64

1

libwbsafeedit_x86_64

ubuntu-18.04-amd64

1

nd

ubuntu-18.04-amd64

Sharing

Copy URL Twitter E-mail

General

  • Target

    4504480bde08df056f4533af6692a892.apk

  • Size

    24.7MB

  • MD5

    4504480bde08df056f4533af6692a892

  • SHA1

    bf85bff38a0a77d70281de4de4da9630f5a80378

  • SHA256

    37fe24573922aff9e6f004cfa235412337503fa6a630abda3a9d3fd9d203cddc

  • SHA512

    83e18f3af9fc84dd70e9ec3915ec7a19e6551510e0767392abd6f7e9c9de117cda3a5787223d58077520163471a152e95748246249ba4f7dd203a58f83c7da32

  • SSDEEP

    393216:L2vx7e0JzB5c3OIqRdTuM2iNIMIB1WmYhwXvF3d59/9XrZVEgQZPgc+EKRx:L2Z7e4zBhVdTuM5SX1W1WjvVELOqKT

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 6 IoCs

Files

  • 4504480bde08df056f4533af6692a892.apk
    .apk android arch:arm arch:arm64

    com.hzzt.ywbl.app

    com.hzzt.ywbl.app.SplashActivity


  • 39285EFA.dex
  • FoxWebViewJavascriptBridge.js
    .js
  • bdxadsdk.jar
    .apk android
  • com.tencent.open.config.json
  • fox_web_error.html
    .html
  • fox_web_reward.html
    .html
  • gdtadv2.jar
    .apk android arch:arm64 arch:arm
  • h5_qr_back.png
    .png
  • hz_ad.json
  • hz_analysis.json
  • hz_commoncfg.json
  • hz_config.json
  • hz_strategy.json
  • hzztSdkConfig.json
  • ksad_common_encrypt_image.png
    .png
  • libwbsafeedit
    .elf linux arm
  • libwbsafeedit_64
    .elf linux aarch64
  • libwbsafeedit_x86
    .elf linux x86
  • libwbsafeedit_x86_64
    .elf linux x64
  • na.czl
  • nd
    .elf linux x86
  • supplierconfig.json
  • tt_mime_type.pro
  • zlsioh.dat
  • zt_7e46b28a-8c93-4940-8238-4c60e64e3c81.png
    .png
  • zt_8d73d1d1-99c2-4601-a23d-57050368f644.png
    .png
  • zt_92827f75-21cd-4faa-9aa5-74191b262edd.png
    .png

Android Permissions

4504480bde08df056f4533af6692a892.apk

Permissions

com.hzzt.ywbl.app.permission.JPUSH_MESSAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.QUERY_ALL_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

android.permission.WAKE_LOCK

com.hzzt.ywbl.app.permission.KW_SDK_BROADCAST

com.asus.msa.SupplementaryDID.ACCESS

freemme.permission.msa

android.permission.REORDER_TASKS

android.permission.ACCESS_COARSE_UPDATES

android.permission.CALL_PHONE

android.permission.FOREGROUND_SERVICE

android.permission.RESTART_PACKAGES

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.READ_SETTINGS

android.permission.WRITE_SETTINGS